CVE-2022-34909: Aremis 4 Nomads

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

An issue was discovered in the A4N (Aremis 4 Nomad) application 1.5.0 for Android. It allows SQL Injection, by which an attacker can bypass authentication and retrieve data that is stored in the database.

Affected products

  • Aremis Aremis 4 Nomads: before 1.5.1 (fixed in 1.5.1)

Published 2023-02-27. Last modified 2026-06-17.